ebec7b23051eaf6200d9b40f27098c94c8981445d3f97cc6b6221d2426a1405a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de37029a259348ef5cc014eee95ba626_JaffaCakes118
Size

310KB
Sample

240913-mqm8asyaqm
MD5

de37029a259348ef5cc014eee95ba626
SHA1

e987beb108dc2d80650bb7736d6c70c35c171a35
SHA256

ebec7b23051eaf6200d9b40f27098c94c8981445d3f97cc6b6221d2426a1405a
SHA512

6df0282d8b3f848f4a3275b1c32e557f41035bf91771bb7b46f1d92b25239d90cecb32e2e930646bc16ddfe6ea1a9e33f769ecc1a22663a3a56a8cc310538729
SSDEEP

6144:doa0YYy6SEwCcRp+F+PKSLaEYoJIKJK45BkEVqup9o/6KyVGyZZUQuBamGHQbhzS:/05RSEdcRpTCMtYou6B24a/6KYGyUwwQ

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  de37029a259348ef5cc014eee95ba626_JaffaCakes118
- Size
  
  310KB
- MD5
  
  de37029a259348ef5cc014eee95ba626
- SHA1
  
  e987beb108dc2d80650bb7736d6c70c35c171a35
- SHA256
  
  ebec7b23051eaf6200d9b40f27098c94c8981445d3f97cc6b6221d2426a1405a
- SHA512
  
  6df0282d8b3f848f4a3275b1c32e557f41035bf91771bb7b46f1d92b25239d90cecb32e2e930646bc16ddfe6ea1a9e33f769ecc1a22663a3a56a8cc310538729
- SSDEEP
  
  6144:doa0YYy6SEwCcRp+F+PKSLaEYoJIKJK45BkEVqup9o/6KyVGyZZUQuBamGHQbhzS:/05RSEdcRpTCMtYou6B24a/6KYGyUwwQ
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation